zames_pro 2.80.2 → 2.80.3

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.80.3] - 2026-10-20
+
+### Fixed
+
+- a malformed uddg escape does not abort the web search
+
 ## [2.80.2] - 2026-10-20
 
 ### Fixed

package/dist/web.js

@@ -643,8 +643,17 @@ export function parseDuckDuckGoResults(body, limit) {
     while ((m = re.exec(body)) && results.length < limit) {
         let href = m[1];
         const uddgMatch = href.match(/[?&]uddg=([^&]+)/);
-        if (uddgMatch)
-            href = decodeURIComponent(uddgMatch[1]);
+        if (uddgMatch) {
+            // decodeURIComponent THROWS on a malformed percent escape (`%ZZ`, a lone
+            // `%`). One broken href in the page must not abort the whole search: keep
+            // the raw href, which the http(s) check below then rejects.
+            try {
+                href = decodeURIComponent(uddgMatch[1]);
+            }
+            catch {
+                href = uddgMatch[1];
+            }
+        }
         const title = htmlToText(m[2] || '').trim();
         const snippet = htmlToText(m[3] || '').trim();
         // Only an absolute http(s) link is a real result. The page can carry a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.80.2",
+  "version": "2.80.3",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {